A bit of background: Project currently have a need to implement the Salesforce Shield solution in a project, and currently the Enterprise/Unlimited/etc. scratch orgs do not support this feature. The workaround we have determined is to use developer scratch orgs for any field creation/modification/etc in order to ensure that the encryption settings are preserved and can be tested.
Root of the problem: When pushing to a developer org, by default the case OWD is set to public read/write, which causes issues with the roles that have been configured as they have the
<caseAccessLevel>none</caseAccessLevel> flag. I get the error of "Case access is below the organization default" error, even when we push the case metadata and it gets set to private. My assumption that the OWD is being set after the roles are pushed.
I am are currently using a .bat for scratch org creation, and I was hoping that there is a way to selectively deploy one file/folder to a scratch org to ensure that the OWD for cases is updated before trying to push the roles.